최신 156-585 무료덤프 - CheckPoint Check Point Certified Troubleshooting Expert

문제1

Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 dat a. This can not be configured in the smartconsole, so how can she modify this property?

A. she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter

B. using GUIDBEDIT located in same directory as Smartconsole on the Windows client

C. she need to install GUIDBEDIT which can be downloaded from the Usercenter

D. this cant be done anymore as GUIDBEDIT is not supported in R80 anymore

정답: A

문제2

How many tiers of pattern matching can a packet pass through during IPS inspection?

A. 9

B. 1

C. 2

D. 5

정답: C

문제3

Which kernel process is used by Content Awareness to collect the data from contexts?

A. CMI

B. PDP

C. dlpda

D. cpemd

정답: A

문제4

What is the benefit of running "vpn debug trunc over "vpn debug on"?

A. No advantage one over the other

B. "vpn debug trunc* provides verbose capture

C. "vpn debug trunc* truncates the capture hence the output contains minimal capture

D. "vpn debug trunc" purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug

정답: D

문제5

Which command can be run in Expert mode to verify the core dump settings?

A. grep cdm /config/db/coredump

B. cat /etc/sysconfig/coredump/cdm.conf

C. grep $FWDIR/config/db/initial

D. grep cdm /config/db/initial

정답: C

문제6

In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of 'Collision', how can this be resolved?

A. The Collision state does not happen in R80.x as the synchronizing automatically on every publish action

B. Reset the SIC of the secondary management server

C. Administrator should manually synchronize the servers using SmartConsole

D. Run the command 'fw send synch force' on the primary server and 'fw get sync quiet' on the secondary server

정답: C

문제7

How many captures does the command "fw monitor -p all" take?

A. 1 from every inbound and outbound module of the chain

B. The -p option takes the same number of captures, but gathers all of the data packet

C. All 4 points of the fw VM modules

D. All 15 of the inbound and outbound modules

정답: A

문제8

VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN Issues?

A. vpn truncon debug

B. cp debug truncon

C. vpn debug truncon

D. fw debug truncon

정답: C

문제9

You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

A. Set these parameters again with "fw ctl set" and save configuration with "save config"

B. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

C. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 156-585 무료덤프 - CheckPoint Check Point Certified Troubleshooting Expert

우리와 연락하기

유용한 링크

최신 업데이트